Hi! I need to create a profile that only allows students to access Google Classroom.  This will require also having some web access to finish the login process; has anyone else done this? 

Good morning All,Been trying to get my new MAC Neo’s (one for now) to authenticate at the machine level to WIFI so we can control them.  We’re attempting to use the SSO extension, I actually have all of that setup.  But my issue is that I don’t have WIFI at the login screen on the Mac.  For the life of me I can’t figure out what I am missing or what I have configured wrong.  It all appears right.  The cert itself is deploying, and it does actually work to connect to WIFI and the SSID I have running.  But the moment I log out as the user I lose WIFI and no one else can sign in.  The Neo’s are going to be for a shared environment.  That's why I want WIFI to work at that level.  Any suggestions?

For over 16 years, Apple admins have gathered at the Jamf Nation User Conference (JNUC) to learn, connect and discover better ways to manage and secure Apple devices. In its tenth year, the JNUC Diversity Sponsorship awards 10 individuals a full conference registration, a meet-and-greet with Jamf leaders, a networking happy hour and a $500 stipend to help cover expenses. We're looking for passionate people eager to learn and bring fresh perspectives to the tightest community in high tech.Applications close at 5 p.m. CST on May 1, 2026. Apply now!Read further to get all the details about Scooter and Alan's first-hand experience as scholarship recipients. SCOOTER’S STORYMy name is Scooter Kohler and I currently work at Alhambra ESD in Phoenix, Az. My journey with Apple hardware didn't start in a server room; it started in my daily life. I’ve been a MacBook user for the entirety of my adult life, drawn in by the clean hardware and stayed for the intuitive nature of the software. When the

Hi Nation,Product Office Hours #5 - Jamf @ Jamf: How we Platform SSONext session: Thursday, 10th Sep - 9am CDT / 3pm BST / 4pm CESTSpeakers: Emily Kausalik (Dr.K), Manager, Client Platform Engineering and Adam Derrick, Sales Engineer IIIRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! Anything we don't get to, we'll follow up right here within 24 hours.See you there!

I need some help and have a question regarding how this works. I’ve just started deploying software update settings via DDM in my Jamf Pro production instance. I currently want to deploy four different blueprints—similar to the configuration profiles I used previously. I noticed that the MDM profile contains multiple entries for device declarations related to software updates, and settings are enabled there that I only actually configured in one of the blueprints. For example, I want to disable “Background Security Improvement removal”; I have explicitly disabled this in one blueprint, yet the setting appears as allowed in the other entries within the MDM profile. Can anyone shed some light on this? Two blueprints are visible in my screenshots. In one, the removal of “Background Security Improvement” is prohibited, while in the other, it is not set at all.  

Hi,Pretty new to Jamf and Mac MDM but seem to have the handle on the majority of stuff. I’m having a single issue with the users enrolling the devices into PSSO during the simplified set-up. I am pretty certain it’s a Conditional access policy we have set within our tenant that blocks access to any cloud resources from Uncompliant devices. The guidelines suggest - “The User Registration app for Device Compliance created when you connected Jamf Pro to Intune must be added as an exclusion in any policy that may prevent users from registering their devices.”And from the logs I can see this is the exact application that is getting blocked on the policy.The problem, even if I add the exception for this application into this conditional access policy it will still get blocked.If I add the user to an Exception group, the device enrols perfectly fine. Not sure if anyone else has had a similar issue? 

So It seems Apple has removed some MDM control of macOS updates in macOS 27 and they are only allowing using DDM commands to do this.Wanting to know if the Defer Major macOS updates MDM profile setting will work in macOS 27 or is this gone too? (I would assume that deferring upgrading to 27 will still work since older versions of the OS still support MDM update control. This is more about the future) I see with Jamf 11.29 that the download & schedule install is now DDM and works on prem but what we are really looking for is a way to continue Defer Major macOS updates for 90 days. We are not in Jamf cloud and not really looking to move.

Just wondering if anyone has any speculation on any announcements at JNUC Keynote this year.  Looking at the session catalog there’s lots on AI, SSO, DDM, Identity management, and OS update management.  The obvious is some announcement on AI but I’ve got nothing specific.I’m interested if anyone else has some speculation.

I just wanted to share some feedback on setting up OIDC SSO with Jumpcloud. While the documentation was pretty good I do find the formatting quite congested, more spacing between steps would be good and not everything I needed wasn’t in the documentation such as the issuer URL which I used Gemini for the answer (https://oauth.id.jumpcloud.com/) if anyone is wanting to know.Other than that it’s all working and I can now get onto setting up blueprints for my devices. https://learn.jamf.com/r/en-US/jamf-account-documentation/JumpCloud 

Hi,i ran into a deadend, where i need your help =) We are currently trying to setup the content cache with parent-child config.A simple ping and netcat are succeeding.I have declared the settings as followed for example:parent: 172.10.10.1child: 20.20.20.1 While reloadSettings it is showing my parent as reloaded. But with “AssetCacheManagerUtil status”i get the output:Parent: (none)i actually cannot get it running.  

Hi Nation,Product Office Hours #6 - OS Readiness and BlueprintsNext session: Thursday, 17th Sep - 9am CDT / 3pm BST / 4pm CESTSpeakers: Katie English, Principal Product Manager and Mark Buffington, Senior Consulting Engineer, Apple TechnologiesRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! Anything we don't get to, we'll follow up right here within 24 hours.See you there!

We have a tech that needs setup to use Jamf Nation with our tenant Caresource. Please let me know if you require any additional information or if there is another way to attach him to the tenant.  Thanks,Nick LumpkinsCaresource

I have created a configuration profile in Jamf Pro for MacBooks that we are deploying as part of a prison education program. Because of the environment, these devices are locked down fairly tightly with several restrictions in place.We have deployed Swift Playgrounds to all of the MacBooks through Jamf, and the application is installing successfully and appearing in the Applications folder. However, when I go to Restrictions > Applications > Allow Apps within the configuration profile, Swift Playgrounds does not appear as an available application to select.Since the application was downloaded through Jamf and successfully pushed to the devices, I am not sure why it is not being recognized in the Allow Apps list.Do you have any suggestions on what I may be missing or how I can get Swift Playgrounds to appear as an available application in the restriction settings?Any advice would be greatly appreciated.

We have been testing 27 beta with every version and I'm not sure why so late in the beta cycle during beta 5 apple decided to add new pop ups. Currently I do not see a way to manage these.  

Is there a way to disable Notification Center completely? Or at least remove the "apps" in NC without students being able to add it back? We use LanSchool; Our math teachers are at a disadvantage since disabling "calculator.app" doesn't disable it in the NC. Restricting "calculator.app" via Jamf doesn't block it in NC, either. We're on macOS High Sierra, and the only thing I have found is the command line below (in quotes). However, I've found that due to Apple's BRILLIANT System Integrity Protection feature, you can't do this. You CAN turn SIP off, which would allow me to run the NC disable command, but can only be done in recovery mode via terminal; which of course, can't be done via Jamf. launchctl unload -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist killall NotificationCenter Any help would be really appreciated. Link on disabling, but doesn't work with High Sierra: https://gist.github.com/mikermcneil/10005651

Please mark your calendars, our next meetup will be on Thursday, October 29th via Zoom. Topics and presenters TBA at the moment.  Currently targeting 5:30-8:00 PM PDT/MST (6:30-9:00 PM MDT), though that may shift a little depending on our presenters’ needs.  If you register for the meetup, you should get automatic updates as we get the event formalized.Registration is free and as always, everyone is welcome! https://luma.com/txnl8jk8​@JoannaB 

Hi,I have an issue with Beyond Trust Bomgar client on Macs Managed with my Jamf Pro instance.I’ve made a Configuration Profile to allow Bomgar in the privacy settings, my test Mac got the rule but when i want to remote connect to my test Mac, i have to autorise 3 options.I saw many topic about this, but even if i made the same rule, it’s not working.If anyone has an idea? Thank you 

Hey Nation! We’re one week out from JNUC! Registration closes September 17. This is your last chance to be in the room — with the sessions, the labs, and the admins solving the same problems you are.Register now: Register Here!See you in Kansas City!!

Hello fellow Jamf Admins,I would be extremely grateful if anyone has come across this App before (Hospital setting) called, “CBORD Mobile Inventory”. I am trying to add the App Config settings like I’ve done for plenty of our other Apps, but this particular App won’t give me a break. Below is a screen shot of what fields need to be filled out and the App Config I came up with and verified via AI. I am at a loss right now. The last thing we want is for our end-users to have to enter the data manually as that would be a nightmare. Any assistance would be very much appreciated. App Config I’ve tried (certain fields have been changed for obvious reasons). <dict>    <key>serverURL</key>   (<===== I have also tried “APIURL”)    <string>https://netmenu4.cbord.com/NetMenuAPI</string>    <key>appClientId</key>    <string>xxxxxddddfffcxxxxxxxx</string>    <key>region</key>    <string>us-east-1</string>    <key&gt

RSVP Here: https://luma.com/1e1eh23rOctober 15th, online  

East Midlands Apple Admins and MacAdmins Scotland are teaming up for our next meet-up on Tuesday 3 November, from 7:00pm to 9:00pm GMT.Everyone is welcome. If you're involved in supporting, securing, or managing Apple devices, we'd love to have you join us.Register here:https://lnkd.in/eZrmktn2The event will be held online via Zoom, with joining instructions sent to registered attendees nearer the time.We're excited to be joined by speakers from Jamf, Workbrew, and Fleet Device Management, who'll be sharing insights and experiences from the Apple IT and endpoint management world, followed by an open Q&A and community discussion.Please share with colleagues and anyone else who may be interested. We look forward to seeing you there!

Do we need to re-enroll all of our computers to make users MDM capable? 

Today we released Jamf Connect 3.13.0; highlights include:  Changes and ImprovementsCompatibility with macOS 27 Golden Gate To reduce excessive messaging in log files, the logs for Jamf Connect no longer include Wi-Fi interface is undefined and Couldn't retrieve hint of key 'pref.XYZ': -60005 statements. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Would love to connect with anyone going to JNUC next week. If you’re coming (or still on the fence) let me know via email at: tracey.joyce@jamf.com

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger doesn’t help eit